Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/n-LXgpKTVMJku5d-x32v2q9oo-g.roa
File: n-LXgpKTVMJku5d-x32v2q9oo-g.roa (raw, json)
Hash identifier: a8ZFgzFVjsRUx3dPBiPOXTN5CB59jckbt8+PgetCgac=
Subject key identifier: 9F:E2:D7:82:92:93:54:C2:64:BB:97:7E:C7:7D:AF:DA:AF:68:A3:E8
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 349CABE2
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/n-LXgpKTVMJku5d-x32v2q9oo-g.roa
Signing time: Sat 09 Apr 2022 21:25:28 +0000
ROA not before: Sat 09 Apr 2022 21:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12735
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882682850 (0x349cabe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Apr 9 21:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fe2d782929354c264bb977ec77dafdaaf68a3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:56:c0:8b:dd:65:e8:9f:10:bf:54:d4:e2:
8a:97:e2:e9:e2:8a:2e:4b:11:31:18:18:5a:d3:81:
9c:68:f7:2b:ac:df:c7:7c:e0:b2:fc:bd:55:e0:00:
11:31:7c:a4:22:62:7c:92:b6:1e:03:ac:c8:6d:d5:
7c:8f:fc:63:98:78:5f:d2:f9:b7:fe:32:6d:18:01:
54:78:d0:96:89:46:20:f7:da:fd:2e:79:78:08:83:
b5:75:1b:20:d6:77:8c:4c:3e:72:4e:6f:c0:bd:09:
65:d0:a2:d3:4d:96:f6:5a:ed:28:75:b6:a0:1d:43:
33:83:b7:98:e6:8f:79:55:78:b6:c2:6e:dc:3a:45:
08:97:0c:3f:f1:cf:f7:9a:0e:7d:0a:16:1a:59:de:
5f:e6:ad:aa:78:09:11:23:82:90:b4:47:cd:be:40:
9c:d1:f2:b8:6d:e9:f7:ee:ce:03:40:23:bc:2d:9c:
fc:4a:00:d4:a6:ba:10:c3:b6:4a:f3:06:c0:fd:2d:
67:e3:e7:34:a5:f4:0f:e0:fa:2f:c2:f1:8b:ae:76:
8c:3c:e0:cd:82:47:79:81:1d:c3:58:4b:2e:79:a4:
a5:44:56:a4:38:f2:aa:e6:9b:0d:9c:e8:96:4b:00:
80:7b:15:91:2f:7b:26:5f:5f:e0:fd:53:50:ea:2b:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:D7:82:92:93:54:C2:64:BB:97:7E:C7:7D:AF:DA:AF:68:A3:E8
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/n-LXgpKTVMJku5d-x32v2q9oo-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
af:33:fb:c2:0c:40:a7:69:eb:1d:c9:5e:5f:0e:06:f8:05:3c:
88:d9:33:ba:9f:62:eb:4f:cf:0e:61:12:6b:0f:05:87:aa:d6:
0e:33:0b:4a:c7:6b:3f:44:3d:7b:f6:86:93:92:c0:6a:57:67:
f6:b0:4d:39:28:94:65:15:02:f7:70:9e:3f:9f:c1:1f:61:34:
ff:6f:a3:ba:d9:f2:52:d5:66:69:a3:fa:33:2a:16:55:dd:ab:
b4:79:8b:33:3b:62:40:f7:79:53:9f:35:9d:96:d1:b1:45:e9:
46:bd:0e:ca:10:69:1f:d1:e5:da:ac:98:84:65:c6:2c:b0:85:
9f:dc:06:eb:7c:a3:1b:ce:93:2c:e1:59:21:a4:6b:46:24:99:
09:d8:0a:e3:a9:47:fb:eb:2f:a8:26:59:e6:04:88:3e:71:c4:
91:96:67:04:fb:bf:bd:19:21:68:fd:5d:09:56:60:b2:80:fe:
a3:f9:61:f4:ad:5f:d0:6b:87:49:f6:dd:23:dc:5c:d2:1c:c5:
e6:84:9b:07:e9:ee:e3:db:1c:ee:a5:c8:a9:5c:fc:cd:96:d4:
e1:b7:68:33:2a:54:41:a2:bc:78:a3:28:b9:e4:0c:43:f4:27:
44:87:ba:d0:23:9a:57:f8:cc:f9:e7:0f:fc:1f:46:82:38:a0:
87:e5:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org